CISA Adds Actively Exploited Collabora Online Vulnerability to KEV Catalog
Summary
CISA added CVE-2026-110447, an OS command injection vulnerability in Collabora Online’s built-in CODE Server, to its KEV Catalog based on evidence of active exploitation. Federal agencies must prioritize remediation under BOD 26-04.
Key points
- CISA added CVE-2026-110447, affecting Collabora Online’s built-in CODE Server, to its Known Exploited Vulnerabilities Catalog.
- CISA says the addition is based on evidence of active exploitation.
- BOD 26-04 requires federal civilian agencies to prioritize KEV-listed vulnerabilities on publicly exposed assets when exploitation could grant total control.
- The directive also sets expectations for agencies to check whether systems were compromised before patching.
- CISA encourages all organizations to prioritize remediation of KEV vulnerabilities using risk-based vulnerability management.
Article Details
- Vulnerability Types
- OS command injection
- Exploitation Status
- active
- Exploit Availability
- unknown
- Patch Status
- unknown